You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Have you ever scanned with a decent antispywarescanner before? Is your norton still up to date?It doesn't look like that...

Your system is terribly infected. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show.Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused.

Install by double-clicking on the downloaded file.If you have a previous version of Ad-Aware installed, during the installation of the new version you will be prompted to uninstall or keep the older version. Be sure to uninstall the previous version.

1. Launch Ad-Aware SE and run the WebUpdate feature. (Click on the Globe icon > Click connect > Click OK > Click Finish.) 2. Set up the Configurations as follows: -- Click the Gear wheel at the top of the Ad-Aware window -- Click General > Safety & Settings: Check (Green) all three. -- Click Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion". 3. Click "Proceed" 4. Click "Scan Now" 5. Deselect "Search for negligible risk entries" as negligible risk entries (MRU's) are not considered to be a threat. 6. Select "Search for low-risk threats" 7. Run the scanner using the Full Scan (Perform full system scan) mode. 8. When the scan has completed, select Next. 9. In the Scanning Results window, select the "Scan Summary" tab. 10. Check the box next to each "target family" you wish to remove. 11. Click next > Click OK. 12. Reboot your computer and post a new hijackthislog.

I did the steps listed below and the computer has started to run a lot better. To answer your questions. No regarding the antispywarescanner and my Norton anti virus will not run the live update when I try. Any suggestions on what I should do would be appreciated.

I see you are running Teatimer.I suggest you to disable it because it can interfere with the changes you'll make on your system.When everything is done and your log is clean again, you can enable it again.If teatimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.How to disable TeaTimer during HijackThis CleanupThen, Download ResetTeaTimer.bat.Double click ResetTeaTimer.bat to remove all entries set by TeaTimer.

* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

When prompted, place a check in: "Delete all offline content", click OK

* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):

Go to Tools > Options.

Click Privacy in the menu on the left side of the Options window.

Click the Clear button located to the right of each option (History, Cookies, Cache).

Click OK to close the Options window
Alternatively, you can clear all information stored while browsing by clicking Clear All.
A confirmation dialog box will be shown before clearing the information.

* Clean other Temporary files + Recycle bin

Go to start > run and type: cleanmgr and click ok.

Let it scan your system for files to remove.

Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.

Press OK to remove them.

* Perform an onlinescan with panda: (please use this scanner instead of any other scanner!)Panda Online- Once you are on the Panda site click the Scan your PC button- A new window will open...click the Check Now button- Enter your Country- Enter your State/Province- Enter your e-mail address and click send- Select either Home User or Company- Click the big Scan Now button- If it wants to install an ActiveX component allow it- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)- When download is complete, click on Local Disks to start the scan- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.Post the contents of the Panda scan report together with a new hijackthislog.

As a sidenote..

I did the steps listed below and the computer has started to run a lot better. To answer your questions. No regarding the antispywarescanner and my Norton anti virus will not run the live update when I try. Any suggestions on what I should do would be appreciated.

If your norton is unable to update anymore, well, there could be several reasons. Or your Norton got corrupted and a reinstall will be the best solution. Or you didn't buy norton and were still using the trial version, so you won't be able to update anymore after the trial expired.In case when you had a trial of Norton, I recommend you uninstall it and install one of the free antivirus. Look in my signature where it says Antivirus and look for freeware. Install one of those instead.

Go to start > run and type: regsvr32 /u occache.dll(or copy and paste this in the field in start > run )Click Ok

Now search and delete:

C:\WINDOWS\Downloaded Program Files\CONFLICT.1\istactivex.infC:\WINDOWS\Downloaded Program Files\CONFLICT.1\on-line.exeC:\WINDOWS\Downloaded Program Files\013631.exeC:\WINDOWS\Downloaded Program Files\014601.exeC:\WINDOWS\Downloaded Program Files\012645.exeC:\WINDOWS\Downloaded Program Files\initial.infC:\WINDOWS\Downloaded Program Files\on-line.exeC:\WINDOWS\Downloaded Program Files\jao.dllC:\WINDOWS\Downloaded Program Files\bridge.inf

To keep this clean in the future, I would suggest the following things:

Install SpywareblasterSpywareBlaster doesn`t scan and clean for so-called spyware, but prevents it from being installed in the first place. It blocks the popular spyware ActiveX controls, and also prevents the installation of any of them via a webpage.

* Avoid illegal sites, because that's where most malware is present.* Don't click on links inside popups.* Don't click on links in spam messages claiming to offer anti-spyware software; because most of these so called removers ARE spyware.* Download free software only from sites you know and trust. Because a lot of free software can bundle other software, including spyware.

And I do suggest you perform an online virusscan once in a while. (Housecall and/or Bitdefender). Because what one virusscanner can't find another one maybe can.Also make sure that your virusscanner, the one that is installed on your system is always up to date!

Effective July 11, 2006, Windows 98, Windows 98 Second Edition, and Windows Me will transition to a non-supported status. After this date, Microsoft will no longer provide any incident support options or security updates. Existing support documents, however, will continue to be available through the Microsoft Support Product Solution Center Web site.http://www.microsoft.com/windows/support/endofsupport.mspx